Read the docs

WeblateOrg

Records50All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

WeblateOrg records in CISA KEV

No WeblateOrg vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Weblate 33 records HIGH Wlc 4 records LOW

Records

33 records in Weblate · all components

TI-2022-07893 CVE-2022-23915 · GHSA-3872-f48p-pxqj

Remote code execution (RCE) in Weblate

Priority MEDIUM 44

The package weblate from 0 and before 4.11.1 are vulnerable to Remote Code Execution (RCE) via argument injection when using git or mercurial repositories.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03099 Published 2022-03-04 Fixed in 4.11.1 CWE-88
TI-2026-26537 CVE-2026-34242 · GHSA-hv99-mxm5-q397

Weblate: Arbitrary File Read via Symlink

Priority LOW 34

Weblate is a web based localization tool.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00465 Published 2026-04-15 Fixed in 5.17 CWE-200
TI-2017-03552 CVE-2017-5537 · GHSA-j24g-gm76-j829

The password reset form in Weblate before 2.10.1 provides different error messages…

Priority LOW 29

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a seri…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02351 Published 2017-03-15 Fixed in 2.10.1 CWE-200
TI-2022-08525 CVE-2022-24710 · GHSA-6jp6-9rf9-gc66

Cross-site Scripting in Weblate

Priority LOW 26

Weblate is a copyleft software web-based continuous localization system.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00753 Published 2022-02-25 Fixed in 4.11 CWE-79
Load more
Open these records in search →